@kolatts/pncli 1.10.0 → 1.11.0

package/dist/{config-NCI2BTQG.js → config-OFLPO5DN.js}

@@ -2,19 +2,21 @@
 import {
   getGlobalConfigPath,
   loadConfig,
+  loadJsonFile,
   maskConfig,
   setConfigValue,
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
-} from "./chunk-O3LWAWSN.js";
+} from "./chunk-AWSXVWRN.js";
 export {
   getGlobalConfigPath,
   loadConfig,
+  loadJsonFile,
   maskConfig,
   setConfigValue,
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
 };
-//# sourceMappingURL=config-NCI2BTQG.js.map
+//# sourceMappingURL=config-OFLPO5DN.js.map

package/dist/{http-L2P23H2D.js → http-LNDRNPP7.js}

@@ -2,9 +2,9 @@
 import {
   HttpClient,
   createHttpClient
-} from "./chunk-3XHTRFRX.js";
+} from "./chunk-VPUWMP2M.js";
 export {
   HttpClient,
   createHttpClient
 };
-//# sourceMappingURL=http-L2P23H2D.js.map
+//# sourceMappingURL=http-LNDRNPP7.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kolatts/pncli",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "The Paperwork Nightmare CLI — One command does what three meetings couldn't.",
   "type": "module",
   "bin": {

package/skills/pncli/SKILL.md

@@ -0,0 +1,92 @@
+---
+name: pncli
+description: Use when asked to set up pncli, configure a service, initialize a repo, or run pncli commands. Walks through identity, work item tracking, source control, and optional services. For any specific service, read the included <service>.md file.
+compatibility: Designed for Claude Code. Requires pncli installed and accessible in PATH.
+user-invocable: true
+metadata:
+  category: setup
+  providers: both
+  services: config
+---
+
+pncli gives AI agents and humans unified CLI access to enterprise tools: Jira, Bitbucket, Confluence, SonarQube, SDElements, Azure DevOps, Jenkins, Artifactory, IBM UrbanCode Deploy, Checkmarx, ServiceNow, Contrast Security IAST, and Sonatype IQ Server.
+
+## Two config levels
+
+**Env vars** — ephemeral, per-session, override the config file. Set before running pncli:
+```
+export PNCLI_<SERVICE>_<KEY>=value
+```
+
+**Config file** — persistent, stored in `~/.pncli/config.json`. Set with:
+```
+pncli config set <service>.<key> <value>
+```
+
+Repo-level defaults (project key, target branch) are stored in `.pncli.json` in the repo root:
+```
+pncli config set --repo defaults.<service>.<key> <value>
+```
+
+## Available services
+
+For detailed setup of any service, read the included file for that service.
+
+| Service | File | Commands unlocked |
+|---------|------|-------------------|
+| Jira | `jira.md` | Issues, sprints, custom fields |
+| Bitbucket | `bitbucket.md` | Repos, PRs, diffs |
+| Azure DevOps | `ado.md` | Work items, repos, PRs, pipelines |
+| Confluence | `confluence.md` | Pages, spaces |
+| SonarQube | `sonarqube.md` | Code quality issues |
+| SDElements | `sde.md` | Threat model tasks |
+| Checkmarx | `checkmarx.md` | SAST findings |
+| IBM UrbanCode Deploy | `udeploy.md` | Component versions, deployments |
+| Jenkins | `jenkins.md` | Builds, job status |
+| Artifactory | `artifactory.md` | Packages, repos |
+| ServiceNow | `servicenow.md` | Change requests, incidents |
+| Contrast IAST | `contrast.md` | Runtime vulnerability findings |
+| Sonatype IQ | `sonatypeiq.md` | Dependency policy enforcement |
+| Skills Marketplace | `marketplace.md` | Install org-internal skills |
+
+## Setup walkthrough
+
+**Step 1 — Identity**
+
+Ask: email address and username/user ID. Then:
+
+```
+pncli config set user.email <email>
+pncli config set user.userId <username>
+```
+
+**Step 2 — Work item tracking**
+
+Ask: "Does this org use Jira or Azure DevOps for work items?" See `jira.md` or `ado.md`.
+
+**Step 3 — Source control**
+
+Ask: "Does this org use Bitbucket or Azure DevOps for PRs?" See `bitbucket.md` or `ado.md`.
+
+**Step 4 — Optional services**
+
+Ask about each optional service the user may need. Read the relevant `.md` file for config keys and commands. Skip services they don't use.
+
+**Step 5 — Repo-level defaults**
+
+```
+pncli config set --repo defaults.jira.project <key>
+pncli config set --repo defaults.bitbucket.targetBranch <branch>
+```
+
+**Step 6 — Test connectivity**
+
+```
+pncli config test
+```
+
+Review results. If any service shows `ok: false`, help troubleshoot the URL or credentials.
+
+```
+pncli config show
+```

package/skills/pncli/ado.md

@@ -0,0 +1,33 @@
+# Azure DevOps (ADO)
+
+Enables: `pncli ado workitem`, `pncli ado repo`, `pncli ado pr`, `pncli ado pipeline` — work items, repos, PRs, and pipeline builds for Azure DevOps Server (on-premise).
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `ado.baseUrl` | `PNCLI_ADO_BASE_URL` | ADO Server root, e.g. `https://tfs.company.com` |
+| `ado.pat` | `PNCLI_ADO_PAT` | Personal access token |
+
+## Config file (persistent)
+
+```
+pncli config set ado.baseUrl https://tfs.company.com
+pncli config set ado.pat <token>
+pncli config set defaults.ado.collection DefaultCollection
+pncli config set defaults.ado.project MyProject
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_ADO_BASE_URL=https://tfs.company.com
+export PNCLI_ADO_PAT=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.ado.collection DefaultCollection
+pncli config set --repo defaults.ado.project MyProject
+```

package/skills/pncli/artifactory.md

@@ -0,0 +1,35 @@
+# Artifactory
+
+Enables: `pncli artifactory repo`, `pncli artifactory package` — list repositories and packages, resolve virtual repo names for npm/NuGet/Maven.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `artifactory.baseUrl` | `PNCLI_ARTIFACTORY_BASE_URL` | Artifactory root, e.g. `https://artifactory.company.com` |
+| `artifactory.token` | `PNCLI_ARTIFACTORY_TOKEN` | Identity token or API key |
+
+## Optional — virtual repo names
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `artifactory.npmRepo` | `PNCLI_ARTIFACTORY_REPO_NPM` | Virtual npm repo name |
+| `artifactory.nugetRepo` | `PNCLI_ARTIFACTORY_REPO_NUGET` | Virtual NuGet repo name |
+| `artifactory.mavenRepo` | `PNCLI_ARTIFACTORY_REPO_MAVEN` | Virtual Maven repo name |
+
+## Config file (persistent)
+
+```
+pncli config set artifactory.baseUrl https://artifactory.company.com
+pncli config set artifactory.token <token>
+pncli config set artifactory.npmRepo npm-virtual
+pncli config set artifactory.nugetRepo nuget-virtual
+pncli config set artifactory.mavenRepo maven-virtual
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_ARTIFACTORY_BASE_URL=https://artifactory.company.com
+export PNCLI_ARTIFACTORY_TOKEN=<token>
+```

package/skills/pncli/bitbucket.md

@@ -0,0 +1,30 @@
+# Bitbucket
+
+Enables: `pncli bitbucket repo`, `pncli bitbucket pr`, `pncli bitbucket diff` — list repos, open/list PRs, get diffs.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `bitbucket.baseUrl` | `PNCLI_BITBUCKET_BASE_URL` | Bitbucket Server root, e.g. `https://bitbucket.company.com` |
+| `bitbucket.pat` | `PNCLI_BITBUCKET_PAT` | Personal access token |
+
+## Config file (persistent)
+
+```
+pncli config set bitbucket.baseUrl https://bitbucket.company.com
+pncli config set bitbucket.pat <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_BITBUCKET_BASE_URL=https://bitbucket.company.com
+export PNCLI_BITBUCKET_PAT=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.bitbucket.targetBranch main
+```

package/skills/pncli/checkmarx.md

@@ -0,0 +1,31 @@
+# Checkmarx
+
+Enables: `pncli checkmarx scan`, `pncli checkmarx finding` — list SAST scans and vulnerability findings.
+
+> **Not officially supported.** Checkmarx CxSAST on-premise does not expose stable PAT-based authentication on all versions. pncli performs the OAuth2 token exchange using username and password, but behaviour varies across CxSAST versions. Use with caution and test connectivity with `pncli config test` before relying on it.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `checkmarx.baseUrl` | `PNCLI_CHECKMARX_BASE_URL` | CxSAST server root, e.g. `https://cx.company.com` |
+| `checkmarx.username` | `PNCLI_CHECKMARX_USERNAME` | CxSAST username |
+| `checkmarx.password` | `PNCLI_CHECKMARX_PASSWORD` | CxSAST password |
+
+pncli handles the OAuth2 token exchange automatically — no external tools required.
+
+## Config file (persistent)
+
+```
+pncli config set checkmarx.baseUrl https://cx.company.com
+pncli config set checkmarx.username <username>
+pncli config set checkmarx.password <password>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_CHECKMARX_BASE_URL=https://cx.company.com
+export PNCLI_CHECKMARX_USERNAME=<username>
+export PNCLI_CHECKMARX_PASSWORD=<password>
+```

package/skills/pncli/confluence.md

@@ -0,0 +1,24 @@
+# Confluence
+
+Enables: `pncli confluence page`, `pncli confluence space` — list/get pages and spaces.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `confluence.baseUrl` | `PNCLI_CONFLUENCE_BASE_URL` | Confluence server root, e.g. `https://confluence.company.com` |
+| `confluence.apiToken` | `PNCLI_CONFLUENCE_API_TOKEN` | Personal access token |
+
+## Config file (persistent)
+
+```
+pncli config set confluence.baseUrl https://confluence.company.com
+pncli config set confluence.apiToken <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_CONFLUENCE_BASE_URL=https://confluence.company.com
+export PNCLI_CONFLUENCE_API_TOKEN=<token>
+```

package/skills/pncli/contrast.md

@@ -0,0 +1,39 @@
+# Contrast Security IAST
+
+Enables: `pncli contrast apps`, `pncli contrast findings` — list applications and runtime vulnerability findings from Contrast Security.
+
+## Required config
+
+All four credential keys are found in your Contrast account under **User Settings → Your Keys**.
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `contrast.baseUrl` | `PNCLI_CONTRAST_BASE_URL` | Contrast instance root (required — no default) |
+| `contrast.orgUuid` | `PNCLI_CONTRAST_ORG_UUID` | Organization UUID |
+| `contrast.username` | `PNCLI_CONTRAST_USERNAME` | Your username (email) |
+| `contrast.apiKey` | `PNCLI_CONTRAST_API_KEY` | API key |
+| `contrast.serviceKey` | `PNCLI_CONTRAST_SERVICE_KEY` | Service key |
+
+**Base URL examples:**
+- Cloud SaaS: `https://app.contrastsecurity.com`
+- On-premise: `https://contrast.company.com`
+
+## Config file (persistent)
+
+```
+pncli config set contrast.baseUrl https://app.contrastsecurity.com
+pncli config set contrast.orgUuid <org-uuid>
+pncli config set contrast.username <email>
+pncli config set contrast.apiKey <api-key>
+pncli config set contrast.serviceKey <service-key>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_CONTRAST_BASE_URL=https://app.contrastsecurity.com
+export PNCLI_CONTRAST_ORG_UUID=<org-uuid>
+export PNCLI_CONTRAST_USERNAME=<email>
+export PNCLI_CONTRAST_API_KEY=<api-key>
+export PNCLI_CONTRAST_SERVICE_KEY=<service-key>
+```

package/skills/pncli/jenkins.md

@@ -0,0 +1,29 @@
+# Jenkins
+
+Enables: `pncli jenkins build`, `pncli jenkins job` — list builds, get build status and console output.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `jenkins.baseUrl` | `PNCLI_JENKINS_BASE_URL` | Jenkins root, e.g. `https://jenkins.company.com` |
+| `jenkins.username` | `PNCLI_JENKINS_USERNAME` | Jenkins username |
+| `jenkins.apiToken` | `PNCLI_JENKINS_API_TOKEN` | API token (generated in Jenkins → User → Configure → API Token) |
+
+pncli authenticates using HTTP Basic (username + API token).
+
+## Config file (persistent)
+
+```
+pncli config set jenkins.baseUrl https://jenkins.company.com
+pncli config set jenkins.username <username>
+pncli config set jenkins.apiToken <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_JENKINS_BASE_URL=https://jenkins.company.com
+export PNCLI_JENKINS_USERNAME=<username>
+export PNCLI_JENKINS_API_TOKEN=<token>
+```

package/skills/pncli/jira.md

@@ -0,0 +1,35 @@
+# Jira
+
+Enables: `pncli jira issue`, `pncli jira sprint`, `pncli jira project`, `pncli jira user` — list and get issues, sprints, custom fields, and project members.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `jira.baseUrl` | `PNCLI_JIRA_BASE_URL` | Jira server root, e.g. `https://jira.company.com` |
+| `jira.apiToken` | `PNCLI_JIRA_API_TOKEN` | Personal access token |
+
+## Config file (persistent)
+
+```
+pncli config set jira.baseUrl https://jira.company.com
+pncli config set jira.apiToken <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_JIRA_BASE_URL=https://jira.company.com
+export PNCLI_JIRA_API_TOKEN=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.jira.project ACME
+```
+
+## Notes
+
+- Jira Cloud and Jira Data Center both work; token format differs (API token vs PAT)
+- Custom fields discovered with `pncli jira project fields`

package/skills/pncli/marketplace.md

@@ -0,0 +1,41 @@
+# Skills Marketplace
+
+Enables installing org-internal Claude Code or GitHub Copilot skills from a private git-hosted marketplace repository.
+
+## Setup
+
+```
+pncli skills marketplace setup <git-clone-url> <local-path>
+```
+
+Use `--branch main` if the default branch is `main` instead of `master`. This clones the repo to `<local-path>` and stores the mapping in your pncli global config.
+
+**Example:**
+```
+pncli skills marketplace setup https://bitbucket.company.com/scm/ai/skills.git ~/ai-skills
+```
+
+## Sync (install a plugin)
+
+Install to `~/.agents/skills` (GitHub Copilot / Codex):
+```
+pncli skills marketplace sync
+```
+
+Install to `~/.claude/skills` (Claude Code):
+```
+pncli skills marketplace sync --claude
+```
+
+Pass a plugin name to skip the interactive picker:
+```
+pncli skills marketplace sync my-plugin --claude
+```
+
+## Marketplace repo structure
+
+The marketplace repo should contain either:
+- A `.claude-plugin/marketplace.json` file listing plugins
+- Or a `plugins/` directory where each subdirectory is a plugin
+
+Each plugin directory should have a `skills/` subdirectory containing skill directories (each with a `SKILL.md`).

package/skills/pncli/sde.md

@@ -0,0 +1,29 @@
+# SDElements
+
+Enables: `pncli sde task` — list threat model tasks and their compliance status for a project.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `sde.connection` | `PNCLI_SDE_CONNECTION` | Connection string in the format `token@hostname` |
+
+The connection string combines your API token and the SDElements hostname into a single value, e.g. `mytoken@sde.company.com`.
+
+## Config file (persistent)
+
+```
+pncli config set sde.connection mytoken@sde.company.com
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_SDE_CONNECTION=mytoken@sde.company.com
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.sde.project 123
+```

package/skills/pncli/servicenow.md

@@ -0,0 +1,33 @@
+# ServiceNow
+
+Enables: `pncli servicenow change`, `pncli servicenow incident` — list and get change requests and incidents.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `servicenow.baseUrl` | `PNCLI_SERVICENOW_BASE_URL` | Instance root, e.g. `https://mycompany.service-now.com` |
+| `servicenow.username` | `PNCLI_SERVICENOW_USERNAME` | ServiceNow username |
+
+### Auth — password or API token (one required)
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `servicenow.password` | `PNCLI_SERVICENOW_PASSWORD` | ServiceNow password |
+| `servicenow.apiToken` | `PNCLI_SERVICENOW_API_TOKEN` | API token (if basic auth is disabled) |
+
+## Config file (persistent)
+
+```
+pncli config set servicenow.baseUrl https://mycompany.service-now.com
+pncli config set servicenow.username <username>
+pncli config set servicenow.password <password>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_SERVICENOW_BASE_URL=https://mycompany.service-now.com
+export PNCLI_SERVICENOW_USERNAME=<username>
+export PNCLI_SERVICENOW_PASSWORD=<password>
+```

package/skills/pncli/sonarqube.md

@@ -0,0 +1,30 @@
+# SonarQube
+
+Enables: `pncli sonar issue`, `pncli sonar project` — list code quality and security issues by project.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `sonar.baseUrl` | `PNCLI_SONAR_BASE_URL` | SonarQube server root, e.g. `https://sonar.company.com` |
+| `sonar.token` | `PNCLI_SONAR_TOKEN` | User token (generated in SonarQube → My Account → Security) |
+
+## Config file (persistent)
+
+```
+pncli config set sonar.baseUrl https://sonar.company.com
+pncli config set sonar.token <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_SONAR_BASE_URL=https://sonar.company.com
+export PNCLI_SONAR_TOKEN=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.sonar.project my-project-key
+```

package/skills/pncli/sonatypeiq.md

@@ -0,0 +1,39 @@
+# Sonatype IQ Server
+
+Enables: `pncli sonatypeiq applications`, `pncli deps frisk --source sonatypeiq` — list applications and scan dependencies against your IQ Server security policies.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `sonatypeiq.baseUrl` | `PNCLI_SONATYPEIQ_BASE_URL` | IQ Server root, e.g. `https://iq.company.com` |
+| `sonatypeiq.userCode` | `PNCLI_SONATYPEIQ_USER_CODE` | User Token code (from User Menu → User Token) |
+| `sonatypeiq.passcode` | `PNCLI_SONATYPEIQ_PASSCODE` | User Token passcode (from User Menu → User Token) |
+
+The `userCode` and `passcode` are User Token credentials, not your login password.
+
+## Config file (persistent)
+
+```
+pncli config set sonatypeiq.baseUrl https://iq.company.com
+pncli config set sonatypeiq.userCode <user-code>
+pncli config set sonatypeiq.passcode <passcode>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_SONATYPEIQ_BASE_URL=https://iq.company.com
+export PNCLI_SONATYPEIQ_USER_CODE=<user-code>
+export PNCLI_SONATYPEIQ_PASSCODE=<passcode>
+```
+
+## Usage
+
+```
+# Discover application IDs
+pncli sonatypeiq applications list
+
+# Scan dependencies against IQ policies
+pncli deps frisk --source sonatypeiq --application-id <id>
+```

package/skills/pncli/udeploy.md

@@ -0,0 +1,48 @@
+# IBM UrbanCode Deploy (uDeploy)
+
+Enables: `pncli udeploy component`, `pncli udeploy version`, `pncli udeploy process` — list component versions and trigger deployment processes.
+
+> **Not officially supported.** IBM UrbanCode Deploy on-premise does not reliably support PAT tokens across all versions and configurations. Authentication via username/password works on most installs; PAT support is version-dependent. Test connectivity with `pncli config test` before relying on it.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `udeploy.baseUrl` | `PNCLI_UDEPLOY_BASE_URL` | UCD server root, e.g. `https://ucd.company.com` |
+
+### Auth option A — PAT
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `udeploy.pat` | `PNCLI_UDEPLOY_PAT` | Personal access token |
+
+### Auth option B — Username/password
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `udeploy.username` | `PNCLI_UDEPLOY_USERNAME` | UCD username |
+| `udeploy.password` | `PNCLI_UDEPLOY_PASSWORD` | UCD password |
+
+## Config file (persistent)
+
+```
+pncli config set udeploy.baseUrl https://ucd.company.com
+pncli config set udeploy.pat <token>
+# or
+pncli config set udeploy.username <username>
+pncli config set udeploy.password <password>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_UDEPLOY_BASE_URL=https://ucd.company.com
+export PNCLI_UDEPLOY_PAT=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.udeploy.application MyApp
+pncli config set --repo defaults.udeploy.environment Production
+```